Exclude automatically added user from a group with All users in the organization

Problem

Exclude specific users from receiving emails sent to a group with all users in the organization.

Environment

  • Admin console

Solution

  1. In the Admin Console.
  2. Navigate to Apps > Google Workspace > Gmail > Compliance.
  3. Go to the Content Compliance setting and Add a rule.
  4. Select the options Inbound and Internal - receiving to cover all messages incoming to the group.
  5. In the section Add expressions that describe the content you want to search for in each message choose:
    1. If ALL of the following match the message.
    2. Click the Add button beside Expressions.
  6. Configure the expression as follows:
    1. Change Simple content match to Advanced content match.
    2. In the Location field, choose Full headers.
    3. In the Match type field, choose Contains text.
    4. In the Content field enter X-BeenThere: group@domain.com replacing the address with the address of the group in question.
  7. Click the Save button.
  8. Click the Add button one more time to add another expression.
  9. Configure the expression as follows:
    1. Choose Advanced content match.
    2. In the Location field, choose Full headers.
    3. For Match type select Contains text.
    4. In the Content field, enter the email address of the user you want to exclude from the All users in the organisation group.
  10. Click the Save button.
  11. Finally, after adding these expressions, in the third section labeled If the above expressions match, do the following change the field Modify message to Reject message or Quarantine in case you prefer to not generate an NDR for the sender.
  12. Click the Save button

Cause

These kinds of groups automatically add all domain users into these groups with the special user All users in the organization. However, not always the delivery of a message to this group is wanted for exactly All users and the best option to avoid the delivery is by setting up a Content Compliance rule.